Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: /2jtDXoEkffGOpiiHVwCZSes+ZHfFyqtS/ZjWMibYYk=
Subject key identifier: 08:3F:E0:99:E1:B2:0C:AC:7E:4D:43:EC:33:B9:25:E2:02:5C:17:34
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 0198D66153CAB3F6D2F6310E93EB1254E047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 1428
Signing time: Sat 23 Aug 2025 10:02:39 +0000
Manifest this update: Sat 23 Aug 2025 10:02:39 +0000
Manifest next update: Sun 24 Aug 2025 10:02:39 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: xjrIxtcVYXtoPgQ6adhbG07WtDGYoPJqOR25jTIsUcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:53:ca:b3:f6:d2:f6:31:0e:93:eb:12:54:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Aug 23 10:02:39 2025 GMT
Not After : Aug 24 10:02:39 2025 GMT
Subject: CN=083fe099e1b20cac7e4d43ec33b925e2025c1734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:2c:c9:5f:b0:f3:2d:75:e3:3c:dd:26:4c:
4c:fa:17:9e:67:5f:e1:ef:7b:8f:86:be:ad:20:77:
d0:44:e6:db:ea:a8:c7:2e:98:32:8e:74:86:c0:e3:
da:07:41:1c:1c:b4:e2:7a:c0:10:ba:d6:61:b9:0e:
d8:df:e5:b3:2c:47:fc:54:36:8c:91:6a:0e:78:c6:
26:5d:db:97:4e:06:47:8e:d8:11:a4:2b:ac:fe:95:
80:f8:60:63:4e:26:41:e7:ae:ec:d0:be:95:3a:b1:
f4:e4:6b:07:94:a1:e3:1c:ac:54:b4:f7:4b:e7:7d:
0d:4d:6d:16:fa:87:b1:a8:8c:56:b1:f1:01:2c:de:
29:1f:ac:31:7d:24:df:5c:20:0d:3a:a6:df:67:6c:
fb:51:b9:1c:7f:b0:17:9c:8c:57:9a:38:45:d1:66:
66:2e:40:fe:e3:24:a8:63:90:3c:5b:e1:dc:2a:cd:
fb:f3:6d:b2:8b:f8:5f:0b:e7:65:83:4c:79:bf:2e:
4e:53:ad:3d:b3:33:aa:d4:35:4d:a8:39:80:1d:46:
01:61:5b:f0:e9:c2:57:46:5c:42:98:ae:9f:41:2c:
b8:b4:87:99:96:69:0f:4e:ba:55:1e:7d:c8:ab:97:
b2:71:f8:32:30:16:3e:29:1d:79:e6:b2:0e:a2:64:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:E0:99:E1:B2:0C:AC:7E:4D:43:EC:33:B9:25:E2:02:5C:17:34
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:99:06:87:86:84:83:c4:f8:c0:c3:d9:5e:54:32:99:e6:98:
9c:09:d1:8c:20:e4:53:0c:34:1a:55:56:25:07:0e:ef:8c:de:
86:6a:f6:ff:6b:71:45:67:c3:b8:66:e1:18:b5:75:4a:25:dc:
64:e1:a3:37:be:a4:9c:f5:cd:cf:ab:18:0d:57:13:e9:9d:3c:
6e:11:2b:b1:a8:54:31:b6:e4:bf:a2:6b:c3:58:dc:b0:36:3c:
ff:9c:83:97:18:c4:be:0c:e0:91:da:10:49:1d:12:38:32:ff:
4a:23:1c:56:77:b5:f5:8c:0e:7b:e1:f1:bb:9e:9c:d0:4e:9b:
c5:ea:da:bb:00:2f:3e:c9:a3:ca:05:3e:5c:af:ac:39:39:65:
d8:4b:ac:92:ac:1e:3f:24:dc:47:66:33:cd:dc:a4:5e:1b:44:
b6:ff:ac:5e:00:f7:53:cb:cb:d7:ff:63:af:8a:89:50:4e:65:
6e:9d:e7:2b:55:f9:51:df:66:f7:2e:2e:20:1f:3c:4e:b6:36:
67:c7:20:01:16:f0:7d:21:17:fc:95:a0:9c:06:d2:40:c2:69:
da:7b:d1:48:2c:ce:d5:29:d5:a5:55:b6:1d:00:f8:75:b5:fd:
57:16:9f:e6:e1:f7:85:d9:09:10:b0:59:db:58:06:6a:a4:17:
ff:12:4a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:54 2025 by rpki-client